Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: alphatran on January 01, 2013, 04:44:36 PM
-
Hi my friends,
Today, I surprised so much, Avast CAN'T detect Perfect Keylogger
I don't know from where and when my PC is infected by the key logger above. Without any exclusion items set, Free Avast Antivirus can't detect the key logger which is very famous for many years ago. What a horrible thing!
I uploaded Perfect Keylogger files found from my Windows/system32 folder and 2 screenshots for scan result (one of Avast and one of Spybot Search and Destroy
Infected files (password: 123456): hxtp://www.mediafire.com/?9mh9pc95p9hofid
Avast Scan result (not detected any thing): http://www.mediafire.com/view/?6xi5o6d3cczz78o
Spybot Search and Destroy: http://www.mediafire.com/view/?p0p8447ukwdaap2
THIS IS A BIG WARNING!
-
Perfect Keylogger is a legit keylogger isn't it and would under most cases be considered a PUP (not scanned for by default). So were you scanning for PUPs ?
Please remove your sharing link as you have no control over who might download it or what use it may be put to.
Does anyone else have access to this computer ?
-
as Davidr say perfectKeylogger is a legit keylogger that you have to buy and install -http://www.blazingtools.com/bpk.html
and avast detect it as Win32:Perflogger-CG [PUP] PUP = not a virus = Possible Unwanted Program
a program that can be used for good or bad... depending on who installed it and why
VirusTotal
https://www.virustotal.com/file/b966953b0a0e0bf648b1043b4e708445b52b020a0485921138bbf3be58d9995d/analysis/1357059516/
https://www.virustotal.com/file/6bba0b8d8bf03ba15828c53e72d83d766e44b3238b55ab75348d8ce93bfd0056/analysis/1357059537/
https://www.virustotal.com/file/525414ffe5f797ebdd7de5620b75ff723de17bf8f399ffcd7ddec2d0b8a5dc4a/analysis/1357059560/
https://www.virustotal.com/file/62e2948c3e3857e8304a657b7e7da30cdcb6842f71bd4c678a1734ebbf17198e/analysis/1357059580/
-
As you said above: Avast CAN DETECT Perfect Keylogger as something (PUP or not a virus or something else) right?
But in this case, Avast CAN'T detect anything, that's is a big trouble
Will you use an Antivirus if it allows any dangerous programs to run on your pc WITHOUT any warning?
The file is for Avast Team do a research and update. I don't know what the team does everyday then the Avast can't detect a very famous key logger like Perfect Keylogger. Ask you boss for this!
-
Hi alphatran,
I will be truely honest with you..
If you want avast to detect this...enable scan for PUP in your real time shields...and they wouldnt change the detection since the program is legit...enable PUP>>>real time shields>> file shield>>sensitivity>>check the box that says scan for PUP and click OK..and avast will detect this as PUP...and please remember no antivirus is 100% >:( >:(
You didnt see the detection at Virustotal:
Kaspersky: not-a-virus:Monitor.Win32.Perflogger.ahn
so yes avast wouldnt change the detection from PUP to malware...because it is a PUP and NOT A VIRUS/MALWARE.
Please read:
http://www.infotech.us/company-blog/22-5-important-facts-about-antivirus-programs
http://my.opera.com/rejzor/blog/2012/08/08/is-antivirus-software-really-useless
This is what is added in everyday updates:
http://www.avast.com/en-in/lp-fr-virus-update?p_ext=&utm_source=prg_fav_70_0&utm_medium=prg_lnk&utm_campaign=free2paid&utm_content=prg_fav_en-invirus-update&p_var=.%2Ffa%2Fen-in%2Fvirus-update&p_pro=0&p_vep=7&p_ves=0&p_lqa=0&p_lsu=24&p_lst=0&p_lex=58&p_lng=en&p_lid=en-in&p_elm=43&p_vbd=1474
so what they do?? they try their level best to protect their more than 170+ million active users...and 190+ million registered users..
MRG AV TESTS RESULT: http://www.mrg-effitas.com/current-tests/flash-test-results/
and you know what?? if you are cautious of what you mess around the internet...you wouldnt get any crap keylogger or virus from the internet.
-
But in this case, Avast CAN'T detect anything, that's is a big trouble
by default it is off because PUP is not virus. so you have to turn PUP scan ON.....in quick and full scan
see attached screenshot...click for big picture
Will you use an Antivirus if it allows any dangerous programs to run on your pc WITHOUT any warning?
It is not dangerous....it is a legit keylogger that you have to buy and install
-
I don't buy any key logger to monitor myself sir
Don't type much here, please download the infected files above then scan with PUP turn on in Avast. Then please let me know the result.
The result of Avast Scan in my pc is: NO THREAT FOUND :(
-
I don't buy any key logger to monitor myself sir
then somone with access to your computer may have done so to monitor you ?
-
If avast isn't detecting it then that is because it's a legitimate program.
-
Avast! is detecting it ..Downloaded and extracted the archive you gave..and avast moved all the files into the chest
Real time shields>>file system shield>>expert settings>>>sensitivity>>check the box that says scan for PUP's>>hit OK.
Try performing a full scan with PUP on now.
You should turn on PUP scan in avast full scans and quick scans using the more details option.
see screenshots in attach..
-
Turn ON PUP scan in AvastUI scan options...hit the more details option under quick and full scan options to enable PUP scan.
Post was splitted due to attachment limit...
see screenshots in attach..
-
Hi my friends,
Thanks so much for helping me,
But I'm a professional developer and very familiar to malware analysis.
Try to scan by yourself then post the result here if you are interested in discussion.
Don't tell me you scare of download infected files into your PC :(.
No one above try to scan this
-
As you can see from true Indian's post/pic he has downloaded an tested and it was detected, if you want your avast to detect it then turn on PUP's.
As others and myself have previously mentioned this is a legitimate program so if you are a professional developer you should understand this and know where and how this program came to be on your system.
-
Hi my friends,
Thanks so much for helping me,
But I'm a professional developer and very familiar to malware analysis.
Try to scan by yourself then post the result here if you are interested in discussion.
Don't tell me you scare of download infected files into your PC :(.
No one above try to scan this
Didnt you see my attached screenshots that I took on the point of avast detection..avast does detect it...you need to enable PUP scan in avast which is NOT turned on by default
Enable PUP scan in your avast in this way:
Real time shields>>file system shield>>expert settings>>sensitivity>>check the box that says scan for PUP's>>hit OK.
Now avast should protect you against this keylogger.
For enabling scan in quick and full scans of avast:
Hit more details option under quick and full scan options in avast user interface>>turn on PUP scan>>now avast will detect PUP;s in the scan and it will even Pick up the keylogger.
Look at my screenshots in attach
-
Hi true indian,
Thanks for your attention in this thread but what you are doing is to talk out of the true:
Let download the video below then do the same as what I do, you will see what you should know:
http://www.mediafire.com/?k0r2c72z3fjx0q6
There is some so bad things the Avast do:
1. Avast CAN'T detect Perfect Keylogger in its scan, whatever Full, Quick or Folder.... THIS IS THE TRUE, take a look on the video or do it by yourself.
2. If the PUP is turn off by default, this should be warned at least on the installation time. But there is no thing to be warned.
3. I think NO ONE wants their antivirus, on which he/she trusted on to protect private information (message, password, bank account....) to allow any software like key logger, screen monitor, password crapper.... So Avast Manager and Developers are crazy to have the PUP turn off by default. If your customer knows this, they will remove Avast surely.
I spent a day of 1st Jan 2013 for changing many passwords because of this trouble, it's my crazy greeting for new year!
Surely, I remove the Avast to try another after for 5 year to use this.
-
It is a legitimate programme that is used (mainly by parents) to track what the kids are doing. It is only bad if someone puts it on your computer without you knowing. It is the same rationale behind some toolbars which I would never use, but some people download them intentionally to use i.e. iLivid
-
PUP is off for a reason with avast so people are not annoyed with PUP detections...I dont see any reason to change your AV... ::)
Also how and from where you got this keylogger is the question..avast is not on fault anyways since it does detect it :-\
-
@alphatran
you are doing a right click scan (scan from windows explorer) ...... but you have not turned on PUP scan for right click ..... did you ;)
http://malwaretips.com/attachment.php?aid=1238
http://malwaretips.com/attachment.php?aid=1239
http://malwaretips.com/attachment.php?aid=1240
3. I think NO ONE wants their antivirus, on which he/she trusted on to protect private information (message, password, bank account....) to allow any software like key logger, screen monitor, password crapper.... So Avast Manager and Developers are crazy to have the PUP turn off by default. If your customer knows this, they will remove Avast surely.
all malicious software is detected with default settings....
the one classed as PUP are none malicious.....thats why it is default off
the avast developers have played with malware 24/7 for over 20 years so they know how this works
and this is my last post here. ::)
-
3. I think NO ONE wants their antivirus, on which he/she trusted on to protect private information (message, password, bank account....) to allow any software like key logger, screen monitor, password crapper.... So Avast Manager and Developers are crazy to have the PUP turn off by default. If your customer knows this, they will remove Avast surely.
all malicious software is detected with default settings....
the one classed as PUP are none malicious.....thats why it is default off
the avast developers have played with malware 24/7 for over 20 years so they know how this works
and this is my last post here. ::)
If what he said was true its impossible to have 170+ million users and over 190+ million registerations ;D
-
Thanks again for all,
But it's enough now, I have removed the Avast so I can't test or do anything else with that bad guy. And I am using another, it's perfect in detect Perfect Keylogger whatever from manual scan or real time protection.
An important thing to make me to remove Avast is the way of Avast Team takes a look on what client reports. I have not been in case of this before: instead of listening the idea you are trying with your best to talk out of the true and don't care on the bad thing on front of your face. I think that no western corporate does this!
I'm over the game,
-
I don't know from where and when my PC is infected by the key logger above.
How did you find out you had an infection file? If Avast! did not find it. Maybe what ever program did put it there. It has been many years since I went on a virus protection hunt. Can get pretty obsessive the thrill of the hunt. So easy to get caught in the marketing strategy. I know those slick hackers got me. Time to run another Full Scan. I have to trust my Virus Protection. Real time.
-
Your really not listening to what is being explained to you, avast will detect it if you enable pup's but pup's aren't enabled by default because pup's technically aren't malicious ( potentially unwanted program ).
The keylogger you have is a legitimate program as has been explained to you many times and must have been purchased if it is on your system, so who put it on there ???
-
According to the video you are doing a right click and scan where PUP option remains disabled..you need to enable it from avast UI.
Why dont you understand what is being explained to you? ???
Open AvastUI>>Settings [On top of the UI]>>now enable the special scan option as highlighted in screenshot>>hit ok>>go the scan computer tab>>now you can turn PUP scan ON OR OFF from the UI for right click and scan.
see screenshots...
Thats enough I feel..you are no dumb ass who cant understand simple english. ::)
This is avast! Help forum not a western co-operate...we are all avast! users who are helping you here.
Again avast does detect and protect you in real time against this keylogger if PUP is On
Even Pondus explained what PUP is and why detection is turned off..because avast cant annoy a lot of their users with detecting vulnerable apps...and WTF all my clients you avast free ;D
Your keylogger is also a legit app...didnt you see the detection on virustotal by kaspersky that flagged it as:
not-a-virus
Again I repeat there is no perfect AV program..you can get infected with any AV around your PC if you are not self cautious :-[
Its pointless posting here now...your fuss of not listening is just stupid and not acceptable.This is what we are explaining you...So..yes avast will not Turn the PUP option on by default just for a single user and rather turn it on and loss a number of clients who are annoyed with PUP detections.
-
I am sorry but it looks like you (Alphatran) do not want to understand it.
-
I am sorry but it looks like you do not want to understand it.
What's not to understand (and by whom) ?
Whilst true indian may not have English as a first language. He is saying what others have said, this will be detected if the OP changes the avast settings to scan for PUPs (off by default, other than web shield and boot-time scan), which this is, a Potentially Unwanted Program.
As has been said Perfect Keylogger is a legit program (as onerous as people think keyloggers are, legit or otherwise) and is probably somewhat difficult to install accidentally or unseen. I asked the OP if anyone else had access to this computer, but didn't get an answer.
-
Whilst true indian may not have English as a first language.
Snap! English is my prime language. ;D